U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

This is an archive
(replace .gov by .rip)

NISTIR 7756 (Draft)

CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture

Date Published: January 2012
Comments Due: February 17, 2012 (public comment period is CLOSED)
Email Questions to: fe-comments@nist.gov

Author(s)

Peter Mell (NIST), David Waltermire (NIST), Larry Feldman (BAH), Harold Booth (NIST), Zach Ragland (BAH), Alfred Ouyang (MITRE), Timothy McBride (DHS)

Announcement

NIST announces the second public comment release of Draft NIST Interagency Report (NISTIR) 7756, CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture. This publication presents an enterprise continuous monitoring technical reference architecture that extends the framework provided by the Department of Homeland Security's CAESARS architecture. The goal is to facilitate enterprise continuous monitoring by presenting a reference architecture that enables organizations to aggregate collected data from across a diverse set of security tools, analyze that data, perform scoring, enable user queries, and provide overall situational awareness. The model design is focused on enabling organizations to realize this capability by leveraging their existing security tools and thus avoiding complicated and resource intensive custom tool integration efforts.

Abstract

Keywords

Continuous Asset Evaluation, Situational Awareness and Risk Scoring (CAESARS); continuous monitoring
Control Families

Audit and Accountability; Assessment, Authorization and Monitoring; Configuration Management; Incident Response; Maintenance; Risk Assessment; System and Communications Protection

Documentation

Publication:
Draft NISTIR 7756 (2nd public draft)

Supplemental Material:
None available

Related NIST Publications:
NISTIR 7799 (Draft)
SP 800-137
ITL Bulletin

Document History:
01/06/12: NISTIR 7756 (Draft)